# Privacy Policy

Last updated: 2026-10-31

This page explains what Capless stores about two groups of people: our customers (people with a Capless account) and the visitors of our customers' websites. Questions: [hello@capless.sh](mailto:hello@capless.sh).

## Visitors of websites that use Capless

For this data our customer decides what is collected and why; Capless processes it on their behalf.

What the snippet sends and what we store with each event:

* Page address, title, referrer and UTM parameters; clicks (the element's tag, visible text and selector); form submits (not field values); JavaScript errors; scroll depth; Web Vitals; and events the website sends itself.
* A random visitor ID and session ID kept in the browser's localStorage. The snippet sets no cookies.
* Browser, operating system, screen size, language and time zone.
* Approximate location (country, region, city) that Cloudflare derives from the IP address. **The IP address itself is not stored**; we keep only a keyed hash of it to recognise bots and abuse.
* Session replays, when the website records them: the page's structure and changes. Text typed into inputs is masked in the browser before it is sent, and password fields are never recorded.

This data is kept until our customer deletes it (by erasure, by deleting a stream, or by deleting the project). Projects that nobody claims are deleted 14 days after their first event.

To ask about data a website collected about you, contact that website's operator. They can find and erase it with one request.

## Customers

* Account: email address, password (stored as a salted hash, if you set one), sign-in sessions (a cookie on app.capless.sh), projects and team membership.
* Billing: Stripe stores your payment details; we store the Stripe customer and subscription IDs and your usage.
* Email: we send sign-in links, invitations and billing notices. We do not send marketing email without asking.
* capless.sh uses Capless itself to measure visits, with the same rules as above. Its home page shows you the records stored about your own visit (matched by the random visitor ID in your browser); nobody else can see them there.

## Where data is processed

* **Cloudflare** runs Capless (Workers, Durable Objects, R2 storage, email sending). Data is stored in Cloudflare's network.
* **ClickHouse Cloud** (AWS, us-east-1) stores the tables of projects that use SQL materializations.
* **Stripe** processes payments.

Error logs contain request paths and error messages, not visitor IP addresses, and are kept for 7 days.

## Your choices

You can export or delete your projects' data at any time through the API and the dashboard. To delete your account, email [hello@capless.sh](mailto:hello@capless.sh) from the account's address.